$ rpki-client -vvf repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft File: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft (raw, json) Hash identifier: Qv5ICPU1p9sB9qscKetJmLAMYpRBJDfP6ieJI3ZYU94= Subject key identifier: 15:45:D9:F0:81:C3:6A:2A:40:D8:FB:02:A5:13:6D:D4:FB:BD:75:5F Authority key identifier: C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 Certificate issuer: /CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Certificate serial: 3D875D3E8BF9E554A51433B0AA93D23FD376CD1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft Manifest number: B2 Signing time: Wed 11 Jun 2025 13:51:52 +0000 Manifest this update: Wed 11 Jun 2025 13:46:52 +0000 Manifest next update: Sat 14 Jun 2025 18:13:52 +0000 Files and hashes: 1: 3135372e36362e33382e302f32332d3234203d3e203633383635.roa (hash: ul03DJPa84uV+wn7V8w/eIH5fK3BBIC1WxDMCBsM/QQ=) 2: C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl (hash: hcAnoYBGjUFsbFC56ZBYrBC2p3BaWTciYHPs9oGybTQ=) 3: 3135372e36362e33382e302f32342d3234203d3e203435333035.roa (hash: cD0fi1g8RJKzuqT2bKPT18EYQnEf1eQo9O4WH9FMt7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Jun 2025 18:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:87:5d:3e:8b:f9:e5:54:a5:14:33:b0:aa:93:d2:3f:d3:76:cd:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4FCDC424C5B4B2A563F0D072573A5492ACF8E36 Validity Not Before: Jun 11 13:46:52 2025 GMT Not After : Jun 14 18:13:52 2025 GMT Subject: CN=1545D9F081C36A2A40D8FB02A5136DD4FBBD755F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:91:7f:b1:2b:fa:0b:b7:d8:e4:3b:ae:ca:2f: 6b:b9:5f:b6:de:cf:7c:d4:13:4c:d2:ea:4d:60:11: ed:3d:72:94:c6:ec:09:06:27:e3:13:43:5e:6b:ac: 7f:e2:de:3c:1a:fd:df:71:df:b7:8e:1d:78:b2:88: 74:59:af:55:52:16:1b:b9:76:c9:d9:68:c1:d5:e8: 17:9f:a7:62:54:02:1c:be:d0:fb:33:c1:2a:3e:1b: 05:9f:40:39:78:e1:f2:60:b4:60:87:80:00:e4:ff: fa:e3:ab:63:51:ce:71:72:ba:fd:be:d6:8a:7b:9a: 33:a5:59:60:3d:1c:f2:6c:05:c2:15:51:ce:be:e1: 81:38:19:9e:f5:43:ca:a9:6d:ae:b1:95:d9:e2:ea: 49:0d:31:90:85:82:5d:42:50:ef:1e:d3:8d:06:18: f9:86:5f:2b:16:56:40:42:f8:49:fd:e3:52:85:53: bb:e9:56:f1:d1:f0:80:6a:2c:65:f9:03:53:d2:14: fe:c1:e9:9d:2b:41:41:33:b4:2c:27:30:9c:be:ad: f6:90:17:a5:a0:57:8b:7d:d9:b1:74:3e:e8:47:7f: 31:9a:ec:7d:63:f6:34:6b:84:e1:ed:b7:81:35:95: 0e:14:0f:53:ac:2d:5c:a9:d1:ce:23:94:71:d5:92: 6a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:45:D9:F0:81:C3:6A:2A:40:D8:FB:02:A5:13:6D:D4:FB:BD:75:5F X509v3 Authority Key Identifier: keyid:C4:FC:DC:42:4C:5B:4B:2A:56:3F:0D:07:25:73:A5:49:2A:CF:8E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1b267a4-5030-4a4f-bb86-71fd230f53d1/0/C4FCDC424C5B4B2A563F0D072573A5492ACF8E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:34:f7:96:dc:35:53:4a:18:e1:88:be:fa:96:6e:7f:92:47: 3e:92:67:12:0a:89:04:e9:ab:5f:82:88:87:bc:67:d6:7a:09: 47:ba:42:62:47:86:0e:21:ab:d1:fa:19:94:d4:a2:ae:2c:ff: 30:86:94:42:b0:ec:53:de:5f:e2:46:85:7a:a6:a4:9d:5a:7f: 59:93:4a:ea:9d:1e:8d:66:ef:96:58:ce:aa:2b:ab:fb:11:0e: f1:df:36:8e:43:60:22:92:7f:66:de:aa:3c:b9:4c:60:d0:ca: f2:ea:94:74:0c:0b:99:1d:3e:43:60:12:d6:49:2e:45:a7:81: 6e:3d:33:a4:af:c7:0a:42:91:7e:d2:49:cf:c8:40:7c:44:21: 48:9d:ae:4e:84:29:9a:73:9b:10:43:ce:e8:f2:8e:b8:bd:ab: 49:c5:64:46:9c:d4:d4:4a:32:96:b9:de:24:ac:b0:8b:9a:8e: f2:1b:bc:fc:1f:ec:a5:c3:57:cc:e5:6d:ec:04:c9:5d:cf:fa: da:f2:2d:a6:8e:7c:eb:ec:5e:2a:25:11:99:91:0c:ab:6e:36: 9c:e2:ee:5e:88:d6:14:60:1f:52:cc:c8:05:2d:f2:34:19:92: 96:ab:de:91:9a:e4:ce:9d:a4:40:2b:a7:15:62:ae:5f:b7:c2: 97:d0:81:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPYddPov55VSlFDOwqpPSP9N2zRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDky QUNGOEUzNjAeFw0yNTA2MTExMzQ2NTJaFw0yNTA2MTQxODEzNTJaMDMxMTAvBgNV BAMTKDE1NDVEOUYwODFDMzZBMkE0MEQ4RkIwMkE1MTM2REQ0RkJCRDc1NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdkX+xK/oLt9jkO67KL2u5X7be z3zUE0zS6k1gEe09cpTG7AkGJ+MTQ15rrH/i3jwa/d9x37eOHXiyiHRZr1VSFhu5 dsnZaMHV6Befp2JUAhy+0PszwSo+GwWfQDl44fJgtGCHgADk//rjq2NRznFyuv2+ 1op7mjOlWWA9HPJsBcIVUc6+4YE4GZ71Q8qpba6xldni6kkNMZCFgl1CUO8e040G GPmGXysWVkBC+En941KFU7vpVvHR8IBqLGX5A1PSFP7B6Z0rQUEztCwnMJy+rfaQ F6WgV4t92bF0PuhHfzGa7H1j9jRrhOHtt4E1lQ4UD1OsLVyp0c4jlHHVkmrvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFUXZ8IHDaipA2PsCpRNt1Pu9dV8wHwYDVR0j BBgwFoAUxPzcQkxbSypWPw0HJXOlSSrPjjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWIyNjdhNC01MDMwLTRhNGYtYmI4Ni03MWZkMjMwZjUzZDEvMC9DNEZDREM0MjRD NUI0QjJBNTYzRjBEMDcyNTczQTU0OTJBQ0Y4RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1NDkyQUNG OEUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFiMjY3YTQtNTAzMC00YTRmLWJi ODYtNzFmZDIzMGY1M2QxLzAvQzRGQ0RDNDI0QzVCNEIyQTU2M0YwRDA3MjU3M0E1 NDkyQUNGOEUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEo095bcNVNKGOGIvvqWbn+SRz6SZxIKiQTp q1+CiIe8Z9Z6CUe6QmJHhg4hq9H6GZTUoq4s/zCGlEKw7FPeX+JGhXqmpJ1af1mT SuqdHo1m75ZYzqorq/sRDvHfNo5DYCKSf2beqjy5TGDQyvLqlHQMC5kdPkNgEtZJ LkWngW49M6SvxwpCkX7SSc/IQHxEIUidrk6EKZpzmxBDzujyjri9q0nFZEac1NRK Mpa53iSssIuajvIbvPwf7KXDV8zlbewEyV3P+tryLaaOfOvsXiolEZmRDKtuNpzi 7l6I1hRgH1LMyAUt8jQZkpar3pGa5M6dpEArpxVirl+3wpfQgec= -----END CERTIFICATE-----Generated at Thu Jun 12 18:38:52 2025 by rpki-client